Hi Bertrand, hi Dominik, I support the auto-security idea as well. Could help to get a couple of "default values" set right on the beginning of configuration. Best regards, Florian EuroTransit GmbH global IP transit and carrier services Chief Technical Officer Alsterufer 30, D-20354 Hamburg fon: +49 40 41354058 fax: +49 40 41354893 E-Mail: florian.hibler@euro-transit.net Internet: http://www.euro-transit.net EuroTransit GmbH CEO: Andy Fischer Commercial Registry: Amtsgericht Hamburg HRB 107158 VAT Number: DE219346766 Registered Office: Hamburg, Germany Notice: This transmittal and/or attachments may be privileged or confidential. If you are not the intended recipient, you are hereby notified that you have received this transmittal in error; any review, dissemination, or copying is strictly prohibited. If you received this transmittal in error, please notify us immediately by reply and immediately delete this message and all its attachments. Thank you. On Feb 16, 2012, at 10:31 AM, Dominik Bay wrote:
Hi Bertrand,
On Thu, Feb 16, 2012 at 10:04, Bertrand Duvivier (bduvivie) <bduvivie@cisco.com> wrote:
A/ BGP SOO extended community 0.X (AS=0) on IOS XR was not supported. à This has been fixed and integrated in recent release.
B/ To see if on low end platforms we could change the default for proxy-arp: in IOS proxy-arp is on by default, this not the case for IOS-XR or NX-OS.
We check with our different partners (including service-provider, enterprise and consumer customers). We can’t change the default, lots of enterprise applications and consumer application need it by default.
What we are looking at now: adding a CLI knob “auto-security [service-provider|enterprise|data-center]”.
This knob if used with service-provider argument will automatically change few default value and turn off proxy-arp.
thanks for the update. Much appreciated :-) The "auto-security" template is a good idea. If there's a way to do "show auto-security" to see the current settings like in show sdm, this would be helpful.
Kind regards, Dominik